The dialog to configure the CUPS server security settings for any of the defined server locations is shown here. It contains the following settings, which may be defined separately for any valid resource (or location) of the CUPS server:
System Group:
Access Permissions:
Auth Type:
Auth Class:
Auth Group Name:
Encryption:
Allow:
Deny:
Order:
Valid resources (or locations) of the CUPS server are:
Server Root Location: /
Server Administration Location: /admin
All printers on the server: /printers
Any individual printer on the server:
for example, /printers/infotec_P320
All printer classes on the server: /classes
:
Any individual printer class on the server:
for example, /classes/all_infotecs_P320_or_P450
For all locations that are not defined separately the setting of the location “above” it is valid.
For example, you have a printer named infotec_P450
with no set security
options. Then the security of the location /printers
will take the responsibility
for this printer as it is a sub-location of/printers
. If, in turn there is no
security set for /printers
,
then the security for /
(the
general security) of the server takes responsibility. Either you have
set this for your purpose or the compiled-in default value takes
over.
The group name for System
or printer administration
access. The default varies depending on the operating system, but
will be lpadmin
, system
or root
(checked for in that order).
Access permissions for each folder served by the scheduler. Locations are relative to the document root.
The authorization to use:
Perform no authentication.
Perform authentication using the HTTP Basic method.
Perform authentication using the HTTP Digest method.
Local certificate authentication can be substituted by the client for Basic or Digest, when connecting to the localhost interface.
The authorization class. Currently only “Anonymous”, “User”, “System” (valid user belonging to the group set as system group), and “group” (valid user belonging to the specified group) are supported.
The group name for “Group” authorization
Whether or not to use encryption. This depends on having the OpenSSL linked into the CUPS library and scheduler.
Possible values are:
Always use encryption (SSL)
Never use encryption.
Use TLS encryption upgrade.
Use encryption if the server requests it.
Allows access from the specified hostname, domain, IP address or network. Possible values are:
All
None
*.domain.com
.domain.com
host.domain.com
nnn.*
nnn.nnn.*
nnn.nnn.nnn.*
nnn.nnn.nnn.nnn
nnn.nnn.nnn.nnn/mmm
nnn.nnn.nnn.nnn/mmm.mmm.mmm.mmm
The host and domain address require that you enable hostname lookups, as described earlier.
Denies access from the specified hostname, domain, IP address or network. Possible values are:
All
None
*.domain.com
.domain.com
host.domain.com
nnn.*
nnn.nnn.*
nnn.nnn.nnn.*
nnn.nnn.nnn.nnn
nnn.nnn.nnn.nnn/mmm
nnn.nnn.nnn.nnn/mmm.mmm.mmm.mmm
The host and domain address require that you enable hostname lookups, as described earlier.
The order of the allow and deny processing.
Would you like to comment or contribute an update to this page?
Send feedback to the TDE Development Team